$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e372e302f32342d3234203d3e203338373533.roa File: 3130332e32392e372e302f32342d3234203d3e203338373533.roa (raw, json) Hash identifier: T+6o3LsskU9pUcY2np2MTGtm0iO95SeTipZV3v378h8= Subject key identifier: 96:B8:F4:A0:8C:16:AA:AE:A8:15:96:7D:EC:0D:7F:89:8A:AF:4D:58 Certificate issuer: /CN=955AF2D41C7C84BFE354F8648EE3271584452C79 Certificate serial: 4359C238C743E4A6C99C26445CDD752AF92E33CA Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e372e302f32342d3234203d3e203338373533.roa Signing time: Sun 03 May 2026 02:55:19 +0000 ROA not before: Sun 03 May 2026 02:50:19 +0000 ROA not after: Sun 02 May 2027 02:55:19 +0000 asID: 38753 IP address blocks: 103.29.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:59:c2:38:c7:43:e4:a6:c9:9c:26:44:5c:dd:75:2a:f9:2e:33:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79 Validity Not Before: May 3 02:50:19 2026 GMT Not After : May 2 02:55:19 2027 GMT Subject: CN=96B8F4A08C16AAAEA815967DEC0D7F898AAF4D58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:b0:62:20:c8:c3:3f:33:20:13:58:ae:6e: 43:82:c7:61:78:15:1a:a3:70:c7:db:55:b2:a8:fc: e9:ec:83:98:64:19:af:7e:10:ab:b8:d6:ed:72:fb: 81:d3:bd:a6:60:4f:7a:31:6e:9d:87:15:72:87:52: da:0f:a1:68:65:6e:2b:28:a0:0f:25:5d:07:fa:d6: 97:a7:84:d1:b5:cf:39:f2:47:a8:ea:13:bc:7b:5a: e5:67:c9:d6:04:b7:ff:2c:f9:ed:70:54:59:a6:54: 8c:2a:35:69:65:a9:9d:5a:db:fc:d6:43:31:b1:ae: 8b:7a:06:c2:06:67:e8:d5:be:54:45:6e:41:8d:ed: 04:70:c3:91:b6:3e:46:28:41:e1:be:c4:8f:80:cd: 0a:92:c8:6b:5f:c2:25:c0:ca:4a:05:46:5e:5b:f4: 9b:29:a9:ca:7d:46:92:a1:d9:be:57:59:94:60:6e: b3:f9:76:7e:48:b5:95:ef:71:eb:c2:e1:68:b1:90: 1b:03:df:fb:f7:e1:88:12:d7:fd:e6:84:4b:62:96: 0d:51:3b:94:7a:55:9c:96:98:0d:40:d6:80:c4:79: d9:5f:ac:20:29:c3:20:7f:3d:de:ab:87:0f:f7:3f: e5:b4:a9:ab:02:04:e1:0b:0a:b6:f1:2b:2f:6f:33: 15:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B8:F4:A0:8C:16:AA:AE:A8:15:96:7D:EC:0D:7F:89:8A:AF:4D:58 X509v3 Authority Key Identifier: keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e372e302f32342d3234203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.7.0/24 Signature Algorithm: sha256WithRSAEncryption bd:59:d0:75:84:22:a8:d4:38:54:96:97:ba:6b:ba:5b:9e:6f: 47:1e:9d:73:8e:a8:4c:9b:0e:93:c7:10:44:b1:b5:b0:7b:59: 73:7f:59:12:b9:c2:b1:db:f1:eb:16:c0:78:3c:83:eb:a0:1a: 1f:f7:9d:71:03:c7:f1:66:78:8e:1c:8b:f9:bb:4d:52:af:86: 96:91:6b:9b:08:98:0d:eb:79:0c:2b:92:26:3a:8c:b8:49:35: b2:3b:31:f6:28:c2:6a:47:ee:0e:9f:40:44:f1:96:bc:28:b2: 79:d1:c7:d2:0b:93:dd:00:a3:e9:cf:5c:68:0e:a1:5d:c8:c6: d4:e5:aa:62:da:47:62:e2:17:f7:c5:a5:53:17:f1:36:4a:1b: fd:ae:4c:c6:13:1d:d2:40:a9:49:ee:24:f8:7c:fd:b9:2f:8b: e9:58:c0:a5:1a:58:c6:94:1e:d3:fd:96:dd:d7:b8:0b:f1:98: 55:24:96:ec:12:0a:a1:1b:f9:a2:0e:3a:51:1d:98:75:ad:a7: 14:3c:ac:ee:38:6c:82:40:2a:c1:a2:08:e7:5b:e4:c9:a7:eb: 2d:4f:75:a6:86:78:f0:6f:74:a5:de:88:82:35:3f:de:e0:8a: f8:d0:88:02:1a:f2:f6:c2:2d:a4:a5:0c:fa:9e:5b:73:cc:b0: 53:2b:3c:48 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUQ1nCOMdD5KbJnCZEXN11KvkuM8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU1QUYyRDQxQzdDODRCRkUzNTRGODY0OEVFMzI3MTU4 NDQ1MkM3OTAeFw0yNjA1MDMwMjUwMTlaFw0yNzA1MDIwMjU1MTlaMDMxMTAvBgNV BAMTKDk2QjhGNEEwOEMxNkFBQUVBODE1OTY3REVDMEQ3Rjg5OEFBRjRENTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxibBiIMjDPzMgE1iubkOCx2F4 FRqjcMfbVbKo/Onsg5hkGa9+EKu41u1y+4HTvaZgT3oxbp2HFXKHUtoPoWhlbiso oA8lXQf61penhNG1zznyR6jqE7x7WuVnydYEt/8s+e1wVFmmVIwqNWllqZ1a2/zW QzGxrot6BsIGZ+jVvlRFbkGN7QRww5G2PkYoQeG+xI+AzQqSyGtfwiXAykoFRl5b 9Jspqcp9RpKh2b5XWZRgbrP5dn5ItZXvcevC4WixkBsD3/v34YgS1/3mhEtilg1R O5R6VZyWmA1A1oDEedlfrCApwyB/Pd6rhw/3P+W0qasCBOELCrbxKy9vMxWrAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUlrj0oIwWqq6oFZZ97A1/iYqvTVgwHwYDVR0j BBgwFoAUlVry1Bx8hL/jVPhkjuMnFYRFLHkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA2YjY2NzMtNDdhMS00NWU1LWI2YzItNDJhYjhiNDc2MjQ5LzAvOTU1QUYyRDQx QzdDODRCRkUzNTRGODY0OEVFMzI3MTU4NDQ1MkM3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTVBRjJENDFDN0M4NEJGRTM1NEY4NjQ4RUUzMjcxNTg0NDUy Qzc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA2YjY2NzMtNDdhMS00NWU1LWI2 YzItNDJhYjhiNDc2MjQ5LzAvMzEzMDMzMmUzMjM5MmUzNzJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDMzMzgzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnHQcwDQYJKoZIhvcNAQEL BQADggEBAL1Z0HWEIqjUOFSWl7prulueb0cenXOOqEybDpPHEESxtbB7WXN/WRK5 wrHb8esWwHg8g+ugGh/3nXEDx/FmeI4ci/m7TVKvhpaRa5sImA3reQwrkiY6jLhJ NbI7MfYowmpH7g6fQETxlrwosnnRx9ILk90Ao+nPXGgOoV3IxtTlqmLaR2LiF/fF pVMX8TZKG/2uTMYTHdJAqUnuJPh8/bkvi+lYwKUaWMaUHtP9lt3XuAvxmFUkluwS CqEb+aIOOlEdmHWtpxQ8rO44bIJAKsGiCOdb5Mmn6y1PdaaGePBvdKXeiII1P97g ivjQiAIa8vbCLaSlDPqeW3PMsFMrPEg= -----END CERTIFICATE-----Generated at Wed May 13 03:23:27 2026 by rpki-client